I wonder if this is an Evil PLC Attack.

Previous CISA advisory on the matter can be found here: https://cisa.gov/news-events/alerts/2023/11/28/exploitation-...